CVE-2026-12793
rootxn/cve-2026-12793Python PoC for CVE-2026-12793 in JetFormBuilder <= 3.6.2: unauthenticated privilege escalation leading to plugin upload and remote code execution,…
exploitationpayload-generationpenetration-testing+5
rootxn/cve-2026-12793Python PoC for CVE-2026-12793 in JetFormBuilder <= 3.6.2: unauthenticated privilege escalation leading to plugin upload and remote code execution,…
e5dfdd568a75282b712b6d93a7a18e12/cve-2025-24813Python PoC exploiting CVE-2025-24813, an Apache Tomcat partial PUT deserialization RCE. Auto-detects vulnerable variants, supports blind command…
e5dfdd568a75282b712b6d93a7a18e12/cve-2025-32432Python exploit for CVE-2025-32432, an unauthenticated RCE in Craft CMS via Yii2 __class injection, with command execution and reverse shell support.
thekawix/cve-2026-41940Generates detection artifacts to verify cPanel/WHM authentication bypass vulnerability (CVE-2026-41940) and tests targets for exposure.
xshadow-here/cve-2026-0740Automated mass exploiter for CVE-2026-0740, an unauthenticated arbitrary file upload in Ninja Forms File Uploads plugin, enabling remote code…
george0papasotiriou/cve-2026-11112-xxe-via-svg-image-uploadDemonstrates XXE via SVG upload with a vulnerable Flask/lxml parser and an exploit script for arbitrary file read, SSRF, and denial-of-service…
momika233/loxs-optimizedWeb vulnerability scanner focused on automated XSS/CSP bypass payload testing and batch SQL injection detection, using SQLMap and reporting only…
anomalousvectors/cve-2024-4367-pocPOC for PDF JS' CVE-2024-4367 vuln
jenderal92/cve-2026-49049Mass vulnerability scanner for CVE-2026-49049 – Unauthenticated Remote Code Execution in Joomla Helix3 plugin. Multi‑threaded, detects both executed…
jenderal92/csrf-exploit-generatorThe CSRF Exploit Generator allows users to generate a CSRF exploit form with configurable parameters.
vesche/cve-2019-10475Reflected XSS proof-of-concept exploit for Jenkins build-metrics plugin CVE-2019-10475, with a Python weaponization script for generating malicious…
watchtowrlabs/watchtowr-vs-netscaler-cve-2026-8451Python exploit tool for CVE-2026-8451 Citrix Netscaler memory overread vulnerability. Generates detection artifacts by leaking memory from target…
nxploited/cve-2025-7340HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload
nxploited/cve-2025-2807Wordpress - Motors Plugin <= 1.4.64 - Arbitrary Plugin Installation Vulnerability
siunam321/cve-2024-8743-pocProof-of-Concept script for WordPress plugin Bit File Manager version <= 6.5.7 Authenticated (Subscriber+) Limited JavaScript File Upload…
nxploited/cve-2024-52380-exploitPicsmize plugin for WordPress is vulnerable to arbitrary file uploads.
sternstundes/cve-2023-1545-poc-pythonCVE-2023-1545-POC with python
cygnusx-26/cve-2022-44268-fixed-pocPython PoC for CVE-2022-44268 that embeds arbitrary file contents into PNG images via ImageMagick, with extraction support for exiftool.